@treeseed/sdk 0.5.2 → 0.6.0

package/dist/operations/services/project-platform.js

@@ -12,8 +12,9 @@ import {
   signEditorialPreviewToken
 } from "../../platform/published-content.js";
 import { createPublishedContentPipeline } from "../../platform/published-content-pipeline.js";
+import { collectTreeseedReconcileStatus, reconcileTreeseedTarget } from "../../reconcile/index.js";
 import { loadTreeseedManifest } from "../../platform/tenant-config.js";
-import { applyTreeseedEnvironmentToProcess, syncTreeseedRailwayEnvironment } from "./config-runtime.js";
+import { applyTreeseedEnvironmentToProcess } from "./config-runtime.js";
 import {
   createPersistentDeployTarget,
   deployTargetLabel,
@@ -21,9 +22,7 @@ import {
   finalizeDeploymentState,
   loadDeployState,
   purgePublishedContentCaches,
-  provisionCloudflareResources,
-  syncCloudflareSecrets,
-  verifyProvisionedCloudflareResources,
+  resolveConfiguredSurfaceBaseUrl,
   writeDeployState
 } from "./deploy.js";
 import { currentManagedBranch, PRODUCTION_BRANCH, STAGING_BRANCH } from "./git-workflow.js";
@@ -270,6 +269,54 @@ function queueClientConfig(siteConfig, state) {
     apiBaseUrl: process.env.TREESEED_QUEUE_API_BASE_URL?.trim() || void 0
   };
 }
+function findFirstMatchingString(value, matcher, seen = /* @__PURE__ */ new Set()) {
+  if (typeof value === "string") {
+    return matcher(value) ? value : null;
+  }
+  if (!value || typeof value !== "object") {
+    return null;
+  }
+  if (seen.has(value)) {
+    return null;
+  }
+  seen.add(value);
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      const match = findFirstMatchingString(entry, matcher, seen);
+      if (match) {
+        return match;
+      }
+    }
+    return null;
+  }
+  for (const entry of Object.values(value)) {
+    const match = findFirstMatchingString(entry, matcher, seen);
+    if (match) {
+      return match;
+    }
+  }
+  return null;
+}
+function resolveImmediatePagesProbeUrl(siteConfig, state, target) {
+  if (target.kind === "persistent" && target.scope === "staging" && state.pages?.projectName) {
+    return `https://${state.pages?.stagingBranch ?? "staging"}.${state.pages.projectName}.pages.dev`;
+  }
+  return state.pages?.url ?? resolveConfiguredSurfaceBaseUrl(siteConfig, target, "web") ?? siteConfig.siteUrl;
+}
+function resolveImmediateApiProbeUrl(siteConfig, state, target) {
+  const configuredUrl = resolveConfiguredSurfaceBaseUrl(siteConfig, target, "api") ?? siteConfig.services?.api?.environments?.[target.kind === "persistent" ? target.scope : "prod"]?.baseUrl ?? siteConfig.services?.api?.publicBaseUrl ?? process.env.TREESEED_API_BASE_URL ?? state.services?.api?.lastDeployedUrl ?? null;
+  if (configuredUrl) {
+    return configuredUrl;
+  }
+  const railwayHost = findFirstMatchingString(
+    state,
+    (value) => /^[a-z0-9-]+\.up\.railway\.app$/iu.test(String(value).trim())
+  );
+  if (railwayHost) {
+    return `https://${railwayHost}`;
+  }
+  return null;
+}
 async function probeQueue(siteConfig, state) {
   const config = queueClientConfig(siteConfig, state);
   if (!config) {
@@ -291,10 +338,25 @@ async function probeQueue(siteConfig, state) {
       budgetHint: 0
     }
   });
-  const pulled = await pullClient.pull({
-    batchSize: 1,
-    visibilityTimeoutMs: 1e4
-  });
+  let pulled;
+  try {
+    pulled = await pullClient.pull({
+      batchSize: 1,
+      visibilityTimeoutMs: 1e4
+    });
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    if (/http_pull mode is enabled/iu.test(detail)) {
+      return {
+        ok: true,
+        skipped: true,
+        reason: "queue_push_only",
+        messageId,
+        detail
+      };
+    }
+    throw error;
+  }
   const message = pulled.messages.find((entry) => entry.body?.messageId === messageId) ?? pulled.messages[0] ?? null;
   if (!message) {
     return { ok: false, reason: "queue_pull_empty" };
@@ -360,12 +422,23 @@ function probeR2(tenantRoot, siteConfig, state, target) {
 function probeScaleConfiguration(siteConfig, state) {
   const worker = state.services?.worker ?? {};
   const scalerKind = String(process.env.TREESEED_WORKER_POOL_SCALER ?? "").trim();
+  if (scalerKind !== "railway" && siteConfig.services?.worker?.provider !== "railway") {
+    return {
+      ok: true,
+      skipped: true,
+      reason: "scaler_unconfigured",
+      mocked: true,
+      serviceId: worker.serviceId ?? null
+    };
+  }
+  const serviceIdentifier = worker.serviceId || process.env.TREESEED_RAILWAY_WORKER_SERVICE_ID || worker.serviceName;
+  const environmentIdentifier = process.env.TREESEED_RAILWAY_ENVIRONMENT_ID || worker.environment;
+  const projectIdentifier = process.env.TREESEED_RAILWAY_PROJECT_ID || worker.projectId || worker.projectName;
   return {
-    ok: Boolean(
-      (scalerKind === "railway" || siteConfig.services?.worker?.provider === "railway") && (worker.serviceId || process.env.TREESEED_RAILWAY_WORKER_SERVICE_ID) && (process.env.TREESEED_RAILWAY_ENVIRONMENT_ID || process.env.TREESEED_RAILWAY_PROJECT_ID || worker.projectId)
-    ),
+    ok: Boolean(serviceIdentifier && (environmentIdentifier || projectIdentifier)),
     mocked: true,
-    serviceId: worker.serviceId ?? null
+    serviceId: worker.serviceId ?? null,
+    serviceName: worker.serviceName ?? null
   };
 }
 async function publishContent(options, reporter) {
@@ -582,14 +655,25 @@ async function provisionProjectPlatform(options) {
   const reporter = resolveReporter(options.tenantRoot, options.reporter);
   const target = createPersistentDeployTarget(options.scope === "local" ? "staging" : options.scope);
   const siteConfig = loadCliDeployConfig(options.tenantRoot);
-  const summary = provisionCloudflareResources(options.tenantRoot, { dryRun: options.dryRun, target });
-  const verification = verifyProvisionedCloudflareResources(options.tenantRoot, { dryRun: options.dryRun, target });
+  const summary = await reconcileTreeseedTarget({
+    tenantRoot: options.tenantRoot,
+    target,
+    env: process.env
+  });
+  const verification = await collectTreeseedReconcileStatus({
+    tenantRoot: options.tenantRoot,
+    target,
+    env: process.env
+  });
   ensureGeneratedWranglerConfig(options.tenantRoot, { target });
-  const syncedSecrets = syncCloudflareSecrets(options.tenantRoot, { dryRun: options.dryRun, target });
-  const syncedRailway = options.scope === "local" ? [] : syncTreeseedRailwayEnvironment({ tenantRoot: options.tenantRoot, scope: options.scope, dryRun: options.dryRun });
   const railwayValidation = options.scope === "local" ? validateRailwayServiceConfiguration(options.tenantRoot, options.scope) : validateRailwayDeployPrerequisites(options.tenantRoot, options.scope);
-  const railwaySchedules = options.scope === "local" ? [] : await ensureRailwayScheduledJobs(options.tenantRoot, options.scope, { dryRun: options.dryRun });
-  const railwayScheduleVerification = options.scope === "local" || options.dryRun ? { ok: true, checks: railwaySchedules } : await verifyRailwayScheduledJobs(options.tenantRoot, options.scope);
+  const railwaySchedules = [];
+  const railwayScheduleVerification = {
+    ok: true,
+    checks: [],
+    skipped: true,
+    reason: "deploy_only"
+  };
   const state = loadDeployState(options.tenantRoot, siteConfig, { target });
   await reporter.reportEnvironment({
     environment: options.scope,
@@ -694,8 +778,11 @@ async function provisionProjectPlatform(options) {
       target: deployTargetLabel(target),
       summary,
       verification,
-      syncedSecrets,
-      syncedRailway,
+      reconcileActions: summary.results.map((result) => ({
+        unitId: result.unit.unitId,
+        action: result.action,
+        provider: result.unit.provider
+      })),
       railwayServices: railwayValidation.services.map((service) => service.key),
       railwaySchedules,
       railwayScheduleVerification
@@ -728,18 +815,31 @@ async function deployProjectPlatform(options) {
     triggeredByType: "project_runner",
     metadata: { scope: options.scope }
   });
-  await provisionProjectPlatform({ ...options, reporter });
+  if (!options.skipProvision) {
+    await provisionProjectPlatform({ ...options, reporter });
+  }
   runNodeScript(options.tenantRoot, "tenant-deploy", ["--environment", options.scope, ...options.dryRun ? ["--dry-run"] : []]);
   const serviceResults = [];
   if (options.scope !== "local") {
     const validation = validateRailwayDeployPrerequisites(options.tenantRoot, options.scope);
     for (const service of validation.services) {
-      serviceResults.push(deployRailwayService(options.tenantRoot, service, { dryRun: options.dryRun }));
+      serviceResults.push(await deployRailwayService(options.tenantRoot, service, { dryRun: options.dryRun }));
     }
+    const railwaySchedules = options.scope === "prod" ? await ensureRailwayScheduledJobs(options.tenantRoot, options.scope, { dryRun: options.dryRun }) : [];
+    const railwayScheduleVerification = options.scope === "prod" && !options.dryRun ? await verifyRailwayScheduledJobs(options.tenantRoot, options.scope) : { ok: true, checks: railwaySchedules, skipped: options.scope !== "prod" ? true : options.dryRun, reason: options.scope !== "prod" ? "prod_only" : "dry_run" };
     finalizeDeploymentState(options.tenantRoot, {
       target: createPersistentDeployTarget(options.scope),
       serviceResults
     });
+    serviceResults.push({
+      service: "railway-schedules",
+      status: railwayScheduleVerification.ok ? "verified" : "failed",
+      command: "railway schedules reconcile",
+      cwd: options.tenantRoot,
+      publicBaseUrl: null,
+      schedules: railwaySchedules,
+      scheduleVerification: railwayScheduleVerification
+    });
   }
   const monitor = await monitorProjectPlatform({ ...options, reporter });
   await reportDeployment(reporter, {
@@ -772,13 +872,14 @@ async function monitorProjectPlatform(options) {
   const target = createPersistentDeployTarget(options.scope === "local" ? "staging" : options.scope);
   const siteConfig = loadCliDeployConfig(options.tenantRoot);
   const state = loadDeployState(options.tenantRoot, siteConfig, { target });
-  const apiBaseUrl = siteConfig.services?.api?.environments?.[options.scope]?.baseUrl ?? siteConfig.services?.api?.publicBaseUrl ?? process.env.TREESEED_API_BASE_URL ?? state.services?.api?.lastDeployedUrl ?? null;
+  const webProbeUrl = resolveImmediatePagesProbeUrl(siteConfig, state, target);
+  const apiBaseUrl = resolveImmediateApiProbeUrl(siteConfig, state, target);
   const checks = {
-    pages: await probeHttp(state.pages?.url ?? siteConfig.siteUrl),
+    pages: await probeHttp(webProbeUrl),
     apiHealth: apiBaseUrl ? await probeHttp(`${String(apiBaseUrl).replace(/\/+$/u, "")}/healthz`) : { ok: false, skipped: true, reason: "api_url_unconfigured" },
     apiReady: apiBaseUrl ? await probeHttp(`${String(apiBaseUrl).replace(/\/+$/u, "")}/readyz`) : { ok: false, skipped: true, reason: "api_url_unconfigured" },
     d1Health: apiBaseUrl ? await probeHttp(`${String(apiBaseUrl).replace(/\/+$/u, "")}/healthz/deep`) : { ok: false, skipped: true, reason: "api_url_unconfigured" },
-    agentHealth: apiBaseUrl ? await probeHttp(`${String(apiBaseUrl).replace(/\/+$/u, "")}/agent/healthz`) : { ok: false, skipped: true, reason: "api_url_unconfigured" },
+    agentHealth: apiBaseUrl ? await probeHttp(`${String(apiBaseUrl).replace(/\/+$/u, "")}/internal/core/agent/healthz`) : { ok: false, skipped: true, reason: "api_url_unconfigured" },
     r2: options.dryRun ? { ok: true, skipped: true, reason: "dry_run" } : probeR2(options.tenantRoot, siteConfig, state, target),
     queue: options.dryRun ? Promise.resolve({ ok: true, skipped: true, reason: "dry_run" }) : probeQueue(siteConfig, state),
     scaleProbe: probeScaleConfiguration(siteConfig, state),
@@ -800,7 +901,9 @@ async function monitorProjectPlatform(options) {
     resolvedChecks.scaleProbe
   ].every((check) => check?.ok === true || check?.skipped === true);
   if (!ok) {
-    throw new Error(`Treeseed monitor failed for ${options.scope}.`);
+    const failedChecks = Object.entries(resolvedChecks).filter(([, check]) => check && typeof check === "object" && check.ok !== true && check.skipped !== true).map(([name, check]) => `${name}: ${JSON.stringify(check)}`);
+    throw new Error(`Treeseed monitor failed for ${options.scope}.
+${failedChecks.join("\n")}`);
   }
   await reportDeployment(reporter, {
     environment: options.scope,

package/dist/operations/services/railway-api.d.ts

@@ -0,0 +1,244 @@
+export declare function normalizeRailwayEnvironmentName(value: string | null | undefined): string;
+export type RailwayWorkspaceSummary = {
+    id: string;
+    name: string;
+};
+export type RailwayEnvironmentSummary = {
+    id: string;
+    name: string;
+};
+export type RailwayServiceSummary = {
+    id: string;
+    name: string;
+};
+export type RailwayProjectSummary = {
+    id: string;
+    name: string;
+    workspaceId: string | null;
+    environments: RailwayEnvironmentSummary[];
+    services: RailwayServiceSummary[];
+};
+export type RailwayServiceInstanceSummary = {
+    id: string | null;
+    buildCommand: string | null;
+    startCommand: string | null;
+    rootDirectory: string | null;
+    healthcheckPath: string | null;
+    healthcheckTimeoutSeconds: number | null;
+    healthcheckIntervalSeconds: number | null;
+    restartPolicy: string | null;
+    runtimeMode: string | null;
+    sleepApplication: boolean | null;
+    runtimeConfigSupported: boolean;
+};
+export type RailwayCustomDomainDnsRecord = {
+    fqdn: string;
+    hostlabel: string;
+    recordType: string;
+    requiredValue: string;
+    currentValue: string;
+    status: string;
+    zone: string;
+    purpose: string;
+};
+export type RailwayCustomDomainSummary = {
+    id: string;
+    domain: string;
+    environmentId: string;
+    serviceId: string;
+    targetPort: number | null;
+    verified: boolean;
+    certificateStatus: string | null;
+    verificationDnsHost: string | null;
+    verificationToken: string | null;
+    dnsRecords: RailwayCustomDomainDnsRecord[];
+};
+export declare function isUsableRailwayToken(value: string | undefined | null): boolean;
+export declare function resolveRailwayApiToken(env?: NodeJS.ProcessEnv | Record<string, string | undefined>): string;
+export declare function resolveRailwayApiUrl(env?: NodeJS.ProcessEnv | Record<string, string | undefined>): string;
+export declare function resolveRailwayWorkspace(env?: NodeJS.ProcessEnv | Record<string, string | undefined>): string;
+export declare function railwayGraphqlRequest<TData = unknown>({ query, variables, env, apiToken, apiUrl, fetchImpl, timeoutMs, retries, }: {
+    query: string;
+    variables?: Record<string, unknown>;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    apiToken?: string;
+    apiUrl?: string;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    retries?: number;
+}): Promise<{
+    data: TData;
+}>;
+export declare function getRailwayAuthProfile({ env, fetchImpl, }: {
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    id: string | null;
+    name: string | null;
+    email: string | null;
+    workspaces: RailwayWorkspaceSummary[];
+}>;
+export declare function resolveRailwayWorkspaceContext({ env, workspace, fetchImpl, }: {
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    workspace?: string;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayWorkspaceSummary>;
+export declare function listRailwayProjects({ env, workspaceId, fetchImpl, }: {
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    workspaceId: string;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayProjectSummary[]>;
+export declare function getRailwayProject({ projectId, env, fetchImpl, }: {
+    projectId: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayProjectSummary | null>;
+export declare function ensureRailwayProject({ projectName, projectId, defaultEnvironmentName, env, workspace, fetchImpl, }: {
+    projectName?: string | null;
+    projectId?: string | null;
+    defaultEnvironmentName?: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    workspace?: string;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    workspace: RailwayWorkspaceSummary;
+    project: RailwayProjectSummary;
+    created: boolean;
+}>;
+export declare function ensureRailwayEnvironment({ projectId, environmentName, env, fetchImpl, }: {
+    projectId: string;
+    environmentName: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    environment: RailwayEnvironmentSummary;
+    created: boolean;
+}>;
+export declare function listRailwayEnvironments({ projectId, env, fetchImpl, }: {
+    projectId: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayEnvironmentSummary[]>;
+export declare function ensureRailwayService({ projectId, serviceName, serviceId, env, fetchImpl, }: {
+    projectId: string;
+    serviceName?: string | null;
+    serviceId?: string | null;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    service: RailwayServiceSummary;
+    created: boolean;
+}>;
+export declare function listRailwayServices({ projectId, env, fetchImpl, }: {
+    projectId: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayServiceSummary[]>;
+export declare function getRailwayServiceInstance({ serviceId, environmentId, env, fetchImpl, }: {
+    serviceId: string;
+    environmentId: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    id: string | null;
+    buildCommand: string | null;
+    startCommand: string | null;
+    rootDirectory: string | null;
+    healthcheckPath: string | null;
+    healthcheckTimeoutSeconds: number | null;
+    healthcheckIntervalSeconds: null;
+    restartPolicy: null;
+    runtimeMode: string;
+    sleepApplication: boolean | null;
+    runtimeConfigSupported: true;
+} | {
+    id: string | null;
+    buildCommand: string | null;
+    startCommand: string | null;
+    rootDirectory: string | null;
+    healthcheckPath: null;
+    healthcheckTimeoutSeconds: null;
+    healthcheckIntervalSeconds: null;
+    restartPolicy: null;
+    runtimeMode: null;
+    sleepApplication: null;
+    runtimeConfigSupported: false;
+}>;
+export declare function ensureRailwayServiceInstanceConfiguration({ serviceId, environmentId, buildCommand, startCommand, rootDirectory, healthcheckPath, healthcheckTimeoutSeconds, healthcheckIntervalSeconds, restartPolicy, runtimeMode, env, fetchImpl, }: {
+    serviceId: string;
+    environmentId: string;
+    buildCommand?: string | null;
+    startCommand?: string | null;
+    rootDirectory?: string | null;
+    healthcheckPath?: string | null;
+    healthcheckTimeoutSeconds?: number | null;
+    healthcheckIntervalSeconds?: number | null;
+    restartPolicy?: string | null;
+    runtimeMode?: string | null;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    instance: {
+        id: string | null;
+        buildCommand: string | null;
+        startCommand: string | null;
+        rootDirectory: string | null;
+        healthcheckPath: string | null;
+        healthcheckTimeoutSeconds: number | null;
+        healthcheckIntervalSeconds: null;
+        restartPolicy: null;
+        runtimeMode: string;
+        sleepApplication: boolean | null;
+        runtimeConfigSupported: true;
+    } | {
+        id: string | null;
+        buildCommand: string | null;
+        startCommand: string | null;
+        rootDirectory: string | null;
+        healthcheckPath: null;
+        healthcheckTimeoutSeconds: null;
+        healthcheckIntervalSeconds: null;
+        restartPolicy: null;
+        runtimeMode: null;
+        sleepApplication: null;
+        runtimeConfigSupported: false;
+    };
+    updated: boolean;
+} | {
+    instance: {
+        id: string;
+        buildCommand: string | null;
+        startCommand: string | null;
+        rootDirectory: string | null;
+        healthcheckPath: string | null;
+        healthcheckTimeoutSeconds: number | null;
+        healthcheckIntervalSeconds: null;
+        restartPolicy: null;
+        runtimeMode: string | null;
+        sleepApplication: boolean | null;
+        runtimeConfigSupported: boolean;
+    };
+    updated: boolean;
+}>;
+export declare function listRailwayVariables({ projectId, environmentId, serviceId, env, fetchImpl, }: {
+    projectId: string;
+    environmentId: string;
+    serviceId?: string | null;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<Record<string, string | null>>;
+export declare function upsertRailwayVariables({ projectId, environmentId, serviceId, variables, env, fetchImpl, }: {
+    projectId: string;
+    environmentId: string;
+    serviceId?: string | null;
+    variables: Record<string, string>;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<void>;
+export declare function listRailwayCustomDomains({ projectId, environmentId, serviceId, env, fetchImpl, }: {
+    projectId: string;
+    environmentId: string;
+    serviceId: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+}): Promise<RailwayCustomDomainSummary[]>;